[Opendnssec-user] RRSIG for hobby.nl expires soon

[Miek Gieben]

[ Quoting <bas at dikkenberg.net> in "[Opendnssec-user] RRSIG for hobby.n..." ]
> Hi i have problem with rrsig’s that are expiring.
> 
> In the kaspl it states that the rrsig’s must be refresh 3d before they expire.
> 
> But opendnssec doesn’t refresh them.

isn't the jitter also in play here? I.e. In the worst case they expire
3 +12 hours day

>                         <Refresh>P3D</Refresh>
>                         <Jitter>PT12H</Jitter>
> 
> But nagios reports: WARNING: check_dnssec_expiration - RRSIG for hobby.nl
> expires soon (20120705141400).

although this is really soon...

grtz Miek
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20120704/8a35b997/attachment.bin>